Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/09/2024, 14:00

General

  • Target

    e0555d715311e0d597c4933ae40bc6d6_JaffaCakes118.exe

  • Size

    36KB

  • MD5

    e0555d715311e0d597c4933ae40bc6d6

  • SHA1

    1fc8c795355938248ad413b47892b3727775f8bd

  • SHA256

    62d4fcca909659a6050bec505e42e90520a146563043277f6a975c8b99acda41

  • SHA512

    50d2adfc01dba93bb260128b6fdcf68d5b5595dcb9ec1aca296c4917031a348ed77787e3a6c749b1bec77e70035a36b02307d5c838a050834538371fb679685b

  • SSDEEP

    768:oCCZmbTb4l5Mvb9uKY0BCI/b3ggTTqh3KIU:w04kh/RIU

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\e0555d715311e0d597c4933ae40bc6d6_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\e0555d715311e0d597c4933ae40bc6d6_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:828

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads